Bug 2208897

Summary: [abrt] radeon_bo_unref: WARNING: CPU: 1 PID: 882 at drivers/gpu/drm/ttm/ttm_bo.c:326 ttm_bo_release+0x289/0x2e0 [ttm] [radeon]
Product: [Fedora] Fedora Reporter: Edward <edwardp>
Component: kernelAssignee: Kernel Maintainer List <kernel-maint>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: acaringi, adscvr, airlied, alciregi, bskeggs, edwardp, hdegoede, hpa, jarodwilson, josef, kernel-maint, lgoncalv, linville, masami256, mchehab, ptalbert, steved
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/671a117d6a49f787d8537bf3e7ae965eac5ba98
Whiteboard: abrt_hash:2cf23744d41186bdb1f927111d87abda0d1a4845;VARIANT_ID=kde;
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: dmesg none

Description Edward 2023-05-22 00:13:29 UTC 
Description of problem:
Do not know how it happened, was booting up the system. Saw Fedora splash screen, then some video corruption, then
black screen with blinking cursor at upper left. Hit ALT-F4 to a login, then 'startx'. Saw notifications of system problems.

Additional info:
reporter:       libreport-2.17.10
WARNING: CPU: 1 PID: 882 at drivers/gpu/drm/ttm/ttm_bo.c:326 ttm_bo_release+0x289/0x2e0 [ttm]
Modules linked in: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_hda_intel edac_mce_amd snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core ccp snd_hwdep kvm snd_seq joydev pktcdvd snd_seq_device snd_pcm irqbypass snd_timer pcspkr usblp wmi_bmof snd acpi_cpufreq soundcore k10temp i2c_piix4 loop zram amdgpu iommu_v2 drm_buddy gpu_sched radeon drm_ttm_helper ttm video serio_raw r8169 i2c_algo_bit drm_suballoc_helper sp5100_tco drm_display_helper wmi cec uas usb_storage fuse
CPU: 1 PID: 882 Comm: kworker/1:5 Not tainted 6.4.0-0.rc2.20230519git2d1bcbc6cd70.25.fc39.x86_64 #1
Hardware name: Hewlett-Packard CQ5826/2AB7, BIOS 6.09 05/04/2011
Workqueue: events drm_mode_rmfb_work_fn
RIP: 0010:ttm_bo_release+0x289/0x2e0 [ttm]
Code: 49 8b b4 24 40 08 00 00 48 83 c4 38 48 8d 53 30 bf 00 20 00 00 5b 5d 41 5c 41 5d 41 5e e9 4f 0e be f2 4c 89 e7 e9 64 fe ff ff <0f> 0b 48 83 7b 20 00 0f 84 af fd ff ff 0f 0b e9 a8 fd ff ff c7 43
RSP: 0018:ffffa6f840c53dc0 EFLAGS: 00010202
RAX: 0000000000000000 RBX: ffff8a2884b7f9e0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffff8a288aeb1242 RDI: ffff8a2884b7f9e0
RBP: ffff8a2884b7f878 R08: ffff8a288aeb13f0 R09: ffff8a28896d71f0
R10: ffffa6f840c53e00 R11: ffffa6f840c53e08 R12: ffff8a288caf46e0
R13: ffffa6f84001fdd0 R14: ffff8a288d934f00 R15: ffffa6f84001fdb8
FS:  0000000000000000(0000) GS:ffff8a2998040000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055db7d747680 CR3: 00000001047c0000 CR4: 00000000000006e0
Call Trace:
 <TASK>
 radeon_bo_unref+0x1e/0x30 [radeon]
 radeon_gem_object_free+0x34/0x60 [radeon]
 drm_gem_fb_destroy+0x69/0x80
 drm_mode_rmfb_work_fn+0x7a/0x90
 process_one_work+0x1c7/0x3d0
 worker_thread+0x51/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x2c/0x50
 </TASK>

Potential duplicate: bug 2112752
Comment 1 Edward 2023-05-22 00:13:34 UTC 
Created attachment 1966085 [details]
File: dmesg
Comment 2 Edward 2023-05-22 03:01:22 UTC 
Rawhide boots into the first previous kernel, without issue:

Linux upstairs 6.4.0-0.rc2.23.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Mon May 15 13:56:37 UTC 2023 x86_64 GNU/Linux
Comment 3 Edward 2023-07-04 14:29:47 UTC 
Description of problem:
Attempting to boot up system, both X11 and Wayland crashed.

Version-Release number of selected component:
kernel-core-6.5.0-0.rc0.20230630gite55e5df193d2.5.fc39

Additional info:
reporter:       libreport-2.17.11
kernel:         6.5.0-0.rc0.20230630gite55e5df193d2.5.fc39.x86_64
crash_function: ttm_bo_release
reason:         WARNING: CPU: 1 PID: 57 at drivers/gpu/drm/ttm/ttm_bo.c:326 ttm_bo_release+0x289/0x2e0 [ttm] [ttm]
type:           Kerneloops
cmdline:        BOOT_IMAGE=(hd0,gpt2)/vmlinuz-6.5.0-0.rc0.20230630gite55e5df193d2.5.fc39.x86_64 root=UUID=9ece2e96-64e7-4457-993a-bcaa02729fbb ro rootflags=subvol=root rhgb quiet
package:        kernel-core-6.5.0-0.rc0.20230630gite55e5df193d2.5.fc39
runlevel:       N 5
comment:        Attempting to boot up system, both X11 and Wayland crashed.

Truncated backtrace:
WARNING: CPU: 1 PID: 57 at drivers/gpu/drm/ttm/ttm_bo.c:326 ttm_bo_release+0x289/0x2e0 [ttm]
Modules linked in: snd_seq_dummy snd_hrtimer nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set rfkill nf_tables nfnetlink qrtr sunrpc snd_hda_codec_realtek edac_mce_amd snd_hda_codec_generic ledtrig_audio snd_hda_intel ccp snd_intel_dspcfg kvm snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_seq wmi_bmof irqbypass snd_seq_device snd_pcm usblp pcspkr acpi_cpufreq i2c_piix4 snd_timer k10temp snd pktcdvd soundcore joydev loop zram amdgpu amdxcp iommu_v2 drm_buddy gpu_sched radeon drm_ttm_helper ttm video i2c_algo_bit drm_suballoc_helper drm_display_helper uas usb_storage serio_raw sp5100_tco cec r8169 wmi fuse
CPU: 1 PID: 57 Comm: kworker/1:2 Not tainted 6.5.0-0.rc0.20230630gite55e5df193d2.5.fc39.x86_64 #1
Hardware name: Hewlett-Packard CQ5826/2AB7, BIOS 6.09 05/04/2011
Workqueue: events drm_mode_rmfb_work_fn
RIP: 0010:ttm_bo_release+0x289/0x2e0 [ttm]
Code: 49 8b b4 24 40 08 00 00 48 83 c4 38 48 8d 53 30 bf 00 20 00 00 5b 5d 41 5c 41 5d 41 5e e9 ef 2a dc c2 4c 89 e7 e9 64 fe ff ff <0f> 0b 48 83 7b 20 00 0f 84 af fd ff ff 0f 0b e9 a8 fd ff ff c7 43
RSP: 0018:ffffa4570026fdc8 EFLAGS: 00010202
RAX: 0000000000000000 RBX: ffff8c95cb74c5e0 RCX: 0000000000000000
RDX: 0000000000000001 RSI: ffff8c95caaeab6a RDI: ffff8c95cb74c5e0
RBP: ffff8c95cb74c478 R08: ffff8c95caaead20 R09: ffff8c95c8b041f0
R10: ffffa4570026fe08 R11: ffffa4570026fe10 R12: ffff8c95cb7d86e0
R13: ffffa45700813d50 R14: ffff8c96d807990d R15: ffffa45700813d38
FS:  0000000000000000(0000) GS:ffff8c96d8040000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fb6610bd990 CR3: 0000000103976000 CR4: 00000000000006e0
Call Trace:
 <TASK>
 ? ttm_bo_release+0x289/0x2e0 [ttm]
 ? __warn+0x81/0x130
 ? ttm_bo_release+0x289/0x2e0 [ttm]
 ? report_bug+0x171/0x1a0
 ? handle_bug+0x3c/0x80
 ? exc_invalid_op+0x17/0x70
 ? asm_exc_invalid_op+0x1a/0x20
 ? ttm_bo_release+0x289/0x2e0 [ttm]
 ? drm_modeset_unlock_all+0x35/0x50
 radeon_bo_unref+0x1e/0x30 [radeon]
 radeon_gem_object_free+0x34/0x60 [radeon]
 drm_gem_fb_destroy+0x69/0x80
 drm_mode_rmfb_work_fn+0x7a/0x90
 process_one_work+0x1e1/0x3f0
 worker_thread+0x1af/0x390
 ? __pfx_worker_thread+0x10/0x10
 kthread+0xe8/0x120
 ? __pfx_kthread+0x10/0x10
 ret_from_fork+0x2c/0x50
 </TASK>